Re: OT: "...value judgement"

2020-07-21 Thread Robert Schetterer
Am 21.07.20 um 21:07 schrieb Bill Cole: On 21 Jul 2020, at 14:06, Grant Taylor wrote: On 7/21/20 11:56 AM, Bill Cole wrote: All answers: "NO!" In those cases, "black" and "white" all reference actual colors of physical things, not a metaphorical value judgment. Hum.  Your "value judgement" s

Re: Spamass milter question

2020-05-27 Thread Robert Schetterer
Am 27.05.20 um 18:35 schrieb @lbutlr: What, if any, local SpamAssassin settings does spams-milter use when processing incoming mail? For example, if I wanted to white list a sender or blacklist a domain, would the general settings in /usr/local/etc/spamassasin/local.cf be the place? I am wond

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-07 Thread Robert Schetterer
> > On 07.05.17 12:46, Thore Boedecker wrote: >> I have played around with it and SA is not performing actual SPF >> queries/validations due to the use of spampd on localhost as a proxy. > > that's why I recommended trying policyd-spf on valhalla.nano-srv

Re: Spam from .br TLDs

2017-04-20 Thread Robert Schetterer
Am 20.04.2017 um 15:57 schrieb RW: > On Wed, 19 Apr 2017 17:37:42 +0200 > Heinrich Boeder wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> >> Hi all, >> >> I tried the Ruleset Robert Schetterer suggested but I still get Sp

Re: Spam from .br TLDs

2017-04-18 Thread Robert Schetterer
ls in > Portuguese Language? > > Cheers, > > - heinrich > > key: 0xC15DAD56 -- 363D 5BC3 9C45 9D09 3D78 1C28 DB68 F047 C15D AD56 > http://www.lafraia.com.br/spambr/ no idea if they are working fine Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30

Re: Yahoo - Can't figure out a server is down?

2017-03-05 Thread Robert Schetterer
no server. >> >> The concept being that some spammers attempt that server, get nothing >> and don't bother trying any other server. >> >> This has been fine for a decade. Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 3

Re: Filtering outbound mail

2017-02-16 Thread Robert Schetterer
traffic ,action should be taken etc ,such exists but not as freeware and for sure it must be fitted to your needs Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Useful and simple script to reduce high spam load at mta level, what do you think

2016-10-27 Thread Robert Schetterer
d-iptables-recent-modul-abwehren/ but this solutions may not fit exact to "your" problem fail2ban is a good well tested solution so you should always decide by deep log analysis which way to go Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64

Re: Greymail and marketing junk

2016-09-30 Thread Robert Schetterer
Am 30.09.2016 um 11:35 schrieb Robert Schetterer: > Am 30.09.2016 um 02:28 schrieb Alex: >> Hi all, >> >> Has anyone given any thought to special rules or methods designed to >> catch greymail? That is, mail that perhaps may be opt-in, but abusive, >> like marke

Re: Greymail and marketing junk

2016-09-30 Thread Robert Schetterer
do expensive content filter to known not wanted domains. At the end ,at a server with many different users you will see that some marketing is really wanted by some users, but others like to see it so best way for this are users own white/blacklists after you filtered the most bad things global. Be

Re: backport 3.4.0 Ubuntu 12.04 TLS

2016-09-16 Thread Robert Schetterer
Am 16.09.2016 um 13:41 schrieb Marcus Schopen: > Hi Robert, > > Am Freitag, den 16.09.2016, 13:02 +0200 schrieb Robert Schetterer: >> Am 16.09.2016 um 12:48 schrieb Marcus Schopen: >>> Hi Patrick, >>> >>> Am Donnerstag, den 15.09.2016, 22:02 -0400 schrieb

Re: backport 3.4.0 Ubuntu 12.04 TLS

2016-09-16 Thread Robert Schetterer
ub/5219815/+listing-archive-extra > > H ... do you think better backporting 3.4.1 from Xenial? Does it run > on Ubuntu 12.04 LTS and 14.04 LTS? > > Ciao! > > tested and running with recompile debian way 3.4.1 from wily 15.04 does run in 14.04 Best Regards MfG Robert

Re: Is greylisting effective? (was Re: Using Postfix and Postgrey - not scanning after hold)

2016-08-04 Thread Robert Schetterer
Am 04.08.2016 um 22:30 schrieb Chris: > Greylisting is just one of several tools available to a system > administrator for filtering out spam as multiple described it does not Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße

Re: Is greylisting effective? (was Re: Using Postfix and Postgrey - not scanning after hold)

2016-08-02 Thread Robert Schetterer
nection is handed over from postcreen to the smtpd > process after a client has passed the tests > you may use a complete postfix server including postscreen etc "before" sendmailbut then it might better to simply change to postfix in total, but such setups are often use with M

Re: Is greylisting effective? (was Re: Using Postfix and Postgrey - not scanning after hold)

2016-07-31 Thread Robert Schetterer
Am 30.07.2016 um 13:10 schrieb Kim Roar Foldøy Hauge: > On Sat, 30 Jul 2016, Robert Schetterer wrote: > >> Am 30.07.2016 um 03:34 schrieb Reindl Harald: >>> >>> >>> Am 29.07.2016 um 22:48 schrieb Dianne Skoll: >>>> On Fri, 29 Jul 2016 22:39:15

Re: Is greylisting effective? (was Re: Using Postfix and Postgrey - not scanning after hold)

2016-07-29 Thread Robert Schetterer
Am 30.07.2016 um 03:34 schrieb Reindl Harald: > > > Am 29.07.2016 um 22:48 schrieb Dianne Skoll: >> On Fri, 29 Jul 2016 22:39:15 +0200 >> Robert Schetterer wrote: >> >>>> I don't use postfix or postscreen. >>> hm.. that does not fit the subj

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
Am 29.07.2016 um 22:22 schrieb Dianne Skoll: > On Fri, 29 Jul 2016 22:21:04 +0200 > Robert Schetterer wrote: > >> now compare with pure postscreen > > I don't use postfix or postscreen. hm.. that does not fit the subject..why did you involved yourself ? All I

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
informative > > >> On Jul 29, 2016, at 1:28 PM, Robert Schetterer > <mailto:r...@sys4.de>> wrote: >> >> the subject Using Postfix and Postgrey - not scanning after hold >> does not match spamassassin list theme >> >> however no need to flame in any ca

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
Am 29.07.2016 um 22:15 schrieb Dianne Skoll: > On Fri, 29 Jul 2016 21:13:56 +0200 > Robert Schetterer wrote: > >> so i.e measure mails tagged as spam by spamassassin >> with pure greylisting setup running before tagging ,perhaps for one >> week, then stop greylis

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
Am 29.07.2016 um 20:45 schrieb Dianne Skoll: > On Fri, 29 Jul 2016 20:36:51 +0200 > Robert Schetterer wrote: > >> Am 29.07.2016 um 20:07 schrieb Dianne Skoll: >>> I don't agree. Greylisting done properly is very effective and has >>> minimal impact.

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
it over years, if you use postscreen you will see greylisting rate will go down to a minimal need, however if done right you can still always combine both can we now return to spamassassin here and get that theme to the postfix list ? Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sy

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
hese days greylisting has lost his effectiveness widly, so depending on your server it makes no sense to use it anymore content filter like spamassassin are "expensive" always "try" to get them at a very last stage in you filter chain best practise configs can be found via google, the rest is looking at your logs and fix stuff in your filter chain when needed Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-19 Thread Robert Schetterer
spamassassin have high "costs", so make sure to reject as most as possible by other stuff before pass to spamassassin. Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amts

Re: spamass-milter: orphaned?

2016-06-01 Thread Robert Schetterer
r. Feel free to file issues or > pull requests there. If/when a spamass-milter project member takes an > interest, changes can be merged back into the official CVS repository. > > Andy > I think you dont have to worry, recent ,the work on spamass-milter is simply done Best

Re: Integrating SpamAssassin With James Server 2.3.1

2016-04-17 Thread Robert Schetterer
Am 17.04.2016 um 14:23 schrieb RW: > On Sun, 17 Apr 2016 10:42:59 +0200 > Robert Schetterer wrote: > >> Am 17.04.2016 um 09:04 schrieb Benjamin Yeo: >>> Hi Guys. I've just downloaded the latest SpamAssassin and I want to >>> integrate with my mail server Ja

Re: Integrating SpamAssassin With James Server 2.3.1

2016-04-17 Thread Robert Schetterer
out everything but still nothing. > > Thanks for looking at this. > > Regards. Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Rule to score word documents

2016-03-30 Thread Robert Schetterer
me extension. > > So the content type header may be "application/octet-stream" and totally > missing a 'name=' component but if there's also a Content-Disposition > header that has a 'filename=' component it will trigger file opening > behaivor. > >

Re: PDFInfo.pm line 418

2016-02-26 Thread Robert Schetterer
Am 26.02.2016 um 09:24 schrieb Benning, Markus: > On 2016-02-26 08:59, Robert Schetterer wrote: >> Hi ,does anyone know something about this ? >> >> Use of uninitialized value in lc at >> /usr/share/perl5/Mail/SpamAssassin/Plugin/PDFInfo.pm line 418 > > Thats

PDFInfo.pm line 418

2016-02-25 Thread Robert Schetterer
Hi ,does anyone know something about this ? Use of uninitialized value in lc at /usr/share/perl5/Mail/SpamAssassin/Plugin/PDFInfo.pm line 418 Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft

Re: How to reject all mails with docs attached?

2016-02-01 Thread Robert Schetterer
.net/p/courier/mailman/message/4591641/ spamassassin ( never used it like this ) http://jrs-s.net/2013/06/14/block-common-trojans-in-spamassassin/ best is that clam will detect the problem Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerst

Re: AWL ?

2015-12-23 Thread Robert Schetterer
n]$ > > hm looks like some stuff isnt fixed final Use of uninitialized value $msgscore in addition (+) at /usr/share/perl5/Mail/SpamAssassin/Plugin/TxRep.pm line 1415 i ve read some bug reports , any recent news to this ? Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys

Re: MailBlacklist.com Integration Testing Phase

2015-08-18 Thread Robert Schetterer
needs a spell-check. >>>> 4. No SOA for the domains used for listings, just single (!) NS >>>> records, >>>> each resolving to a single IP. >>>> 5. The IPs pointed to by those NS records are allocated to the >>>> notoriously spam-friendly & bo

need_tags

2015-05-02 Thread Robert Schetterer
levels on production servers for better analysis Any Idea ? Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc S

Re: effectiveness of DCC checks?

2015-04-14 Thread Robert Schetterer
eing where it is flagging a lot of email that clearly isn't > spam. Are others who use DCC seeing similar issues? NO > > --Quanah > > -- > > Quanah Gibson-Mount > Platform Architect > Zimbra, Inc. > > Zimbra :: the leader in o

Re: German law 303a (was Re: Spamassassin not catching spam (Follow-up))

2015-03-26 Thread Robert Schetterer
ovider you may get contracted to filter. But be sure to have good legal advice if your filter does silent discard. Thats best practice for over 10 years now. And yes laws may miracle included everywhere, there are tons of them in the US i will never understand too *g Best Regards MfG Robert Schet

Re: Rejecting without backscatter (was Re: Spamassassin not catching spam (Follow-up))

2015-03-26 Thread Robert Schetterer
Am 26.03.2015 um 16:19 schrieb Kevin A. McGrail: > On 3/26/2015 11:11 AM, Robert Schetterer wrote: >> what he describes is not backscatter, cause the mail is rejected during >> smtp imcome stage, wich means the server simply didnt take the mail >> during the running smtp ses

Re: Spamassassin not catching spam (Follow-up)

2015-03-26 Thread Robert Schetterer
Am 26.03.2015 um 16:03 schrieb Kevin A. McGrail: > On 3/26/2015 9:54 AM, Robert Schetterer wrote: >> so again , there are exceptions, but in general you are not allowed >> to silent discard mail in germany. > Unless there are MASSIVE translation issues, the answer is exactly w

Re: Rejecting without backscatter (was Re: Spamassassin not catching spam (Follow-up))

2015-03-26 Thread Robert Schetterer
nough in real world, also you may combine it with any other after-queue content filter backscatter would mean accept the mail and bounce it back later to i.e a forged sender study http://www.postfix.org/MILTER_README.html http://www.postfix.org/FILTER_README.html http://www.postfix.org/BAC

Re: Spamassassin not catching spam (Follow-up)

2015-03-26 Thread Robert Schetterer
Am 26.03.2015 um 15:05 schrieb David F. Skoll: > On Thu, 26 Mar 2015 14:54:07 +0100 > Robert Schetterer wrote: > >> Uff , why should i waste my time in telling you the untruth... > > I took a look at the Heise article and Google Translate says: > > ]]] If acti

Re: Spamassassin not catching spam (Follow-up)

2015-03-26 Thread Robert Schetterer
Am 26.03.2015 um 14:36 schrieb David F. Skoll: > On Thu, 26 Mar 2015 14:29:01 +0100 > Robert Schetterer wrote: > >> As i wrote, there maybe exceptions, but in general >> youre not allowed to silent discard any mail ( unless its your own , >> or its a virus ) &

Re: Spamassassin not catching spam (Follow-up)

2015-03-26 Thread Robert Schetterer
Am 26.03.2015 um 14:13 schrieb David F. Skoll: > On Thu, 26 Mar 2015 14:02:19 +0100 > Robert Schetterer wrote: > >> Silent discard mail is mostly forbidden in the EU, > > Is it? Could you perhaps point me to the EU directive stating this? > I'm sure there must be

Re: Spamassassin not catching spam (Follow-up)

2015-03-26 Thread Robert Schetterer
, also typical quarantaine "may" lead to equal legal trouble. Using silent discard for avoiding backscatter reasons is bad design and should not be needed. Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München S

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-16 Thread Robert Schetterer
Am 16.03.2015 um 19:30 schrieb Reindl Harald: > > > Am 16.03.2015 um 19:24 schrieb Robert Schetterer: >> Am 16.03.2015 um 18:33 schrieb Reindl Harald: >>> Am 16.03.2015 um 18:19 schrieb Matus UHLAR - fantomas: >>>> On 16.03.15 00:59, Jude DaShiell wrote:

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-16 Thread Robert Schetterer
ds per > message with 100% CPU load - you will notice that quickly ba attach a > large plaintext logfile in case of spamass-milter on a submission server > because it ends in a client timeout > dont use spamass-milter with submission, its to slow, clamav-milter with sanesecurity f

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Robert Schetterer
Am 15.03.2015 um 19:03 schrieb Axb: > On 03/15/2015 06:49 PM, Robert Schetterer wrote: >> Am 15.03.2015 um 18:32 schrieb Robert Schetterer: >>> tagging is allowed, rejecting is nice but not a must have >> >> if you like reject try working in milter chaining with &

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Robert Schetterer
Am 15.03.2015 um 18:32 schrieb Robert Schetterer: > tagging is allowed, rejecting is nice but not a must have if you like reject try working in milter chaining with milter-manager http://milter-manager.sourceforge.net/ ( stats included ) this gives you option for complex filter scenarios with

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Robert Schetterer
Am 15.03.2015 um 17:53 schrieb Reindl Harald: > > Am 15.03.2015 um 17:24 schrieb Robert Schetterer: >> Am 15.03.2015 um 12:05 schrieb Reindl Harald: >>> >>> Am 14.03.2015 um 20:17 schrieb Robert Schetterer: >>>> Am 14.03.2015 um 18:11 schrieb Reind

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Robert Schetterer
Am 15.03.2015 um 12:05 schrieb Reindl Harald: > > Am 14.03.2015 um 20:17 schrieb Robert Schetterer: >> Am 14.03.2015 um 18:11 schrieb Reindl Harald: >>> nobody but talks about cut content >>> >>> we talk about how to pass only a part to spamassassin instead

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-14 Thread Robert Schetterer
Am 14.03.2015 um 20:22 schrieb David F. Skoll: > On Sat, 14 Mar 2015 20:17:27 +0100 > Robert Schetterer wrote: > >> Ok, but big spam mails are extrem rare, i wouldnt invest time in that > > They are quite rare, but common enough IMO that our customers would be > annoye

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-14 Thread Robert Schetterer
Am 14.03.2015 um 18:11 schrieb Reindl Harald: > > > Am 14.03.2015 um 18:01 schrieb Robert Schetterer: >> Am 14.03.2015 um 17:55 schrieb David F. Skoll: >>> On Sat, 14 Mar 2015 17:08:50 +0100 >>> Reindl Harald wrote: >>> >>>> Am 14.03.2015 u

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-14 Thread Robert Schetterer
gets passed to SpamAssassin without > actually messing with the original message. > > Regards, > > David. > define oversize..., cutting mail content may not allowed in many countries, most legal policy, is reject ( at income smtp level ) or pass , tag passed mail is allowed if t

Re: Training new spamass-milter setup

2015-02-17 Thread Robert Schetterer
Am 17.02.2015 um 16:13 schrieb LuKreme: > OK, so I have spamass-milter running, but I need to train it. What is the > proper way to do this? > you dont train spamass-milter, you should train spamassassin http://spamassassin.apache.org/full/3.0.x/dist/doc/sa-learn.html Best Regards M

Re: Quick spamass-milter question

2015-02-15 Thread Robert Schetterer
Am 15.02.2015 um 19:35 schrieb LuKreme: > On 15 Feb 2015, at 04:01 , Robert Schetterer wrote: >> Am 15.02.2015 um 01:29 schrieb LuKreme: >>> Spamass-milter is (as designed, I’m sure) checking outbound mail. When it >>> does this, SPF checks fail and a lot of outboun

Re: Quick spamass-milter question

2015-02-15 Thread Robert Schetterer
long way configure spamassassin stuff to get it work ), alternative use clamav-milter with sanesecurity antipishing sigs > > The domains in question *do* have SPF records. > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße

Re: possible bug in Mail::DKIM when keysize is under 1024 bits

2015-01-11 Thread Robert Schetterer
an > 1024 is accurate. > > Regards, > KAM however lets wait for error reports with keysize bigger then 1024, 2048 by so called smtp inspection features on some gateway and fireway products *g Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Fran

Re: Rule to match a blacklist of email addresses.

2015-01-10 Thread Robert Schetterer
source and full documentation plus a Makefile that > can be used to install the 'portmanteau' tool. > > > HTH > Martin > > > > that sounds nice ! Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 F

Re: Can not disable checks against dnsbl.ahbl.org

2015-01-09 Thread Robert Schetterer
--- # Now, single zone BLs follow: # AHBL is closing down. disabling early. (Axb-2014-03-28) # another domain-based blacklist #header DNS_FROM_AHBL_RHSBL eval:check_rbl_envfrom('ahbl', 'rhsbl.ahbl.org.') #describe DNS_FROM_AHBL

Re: OT: parking-nameservers

2014-11-08 Thread Robert Schetterer
Domain is parked at > a.ns.ultsearch.com; from= to=<***> proto=ESMTP > helo= > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: NULL_IN_BODY: 1.6

2014-11-01 Thread Robert Schetterer
Am 01.11.2014 um 21:20 schrieb Reindl Harald: > > > Am 01.11.2014 um 21:16 schrieb Robert Schetterer: >> Am 01.11.2014 um 20:10 schrieb Reindl Harald: >>> well, a message from china with a NULL char runied my saturday by freeze >>> our lmtpd-service again and

Re: NULL_IN_BODY: 1.6

2014-11-01 Thread Robert Schetterer
that not be a block score? > (yes with milter SA rejects) > > 1.6 NULL_IN_BODY FULL: Message has NUL (ASCII 0) byte in message > > UPDATED: /etc/mail/spamassassin/local.cf > 238a239 > > score NULL_IN_BODY 8.0 > should be a good hint , if in trouble Best Regards MfG

Re: procmail (was Re: Spam messages bypassing SA)

2014-10-27 Thread Robert Schetterer
Am 27.10.2014 um 21:04 schrieb Daniel Staal: > --As of October 27, 2014 8:29:52 PM +0100, Robert Schetterer is alleged > to have said: > >> by the way >> >> http://www.exploit-db.com/exploits/34896/ >> >> always have a shellshock patched system these days

Re: procmail (was Re: Spam messages bypassing SA)

2014-10-27 Thread Robert Schetterer
icense >> key generated for/ && mail_for(qr/provision_request/); >> accept_mail("Buildbot") if $m->subject =~ /^buildbot success/; >> accept_mail("Buildbot") if $m->subject =~ /^buildbot failure/; >> >> $m->accept("$p/Received

Re: getting tons of SPAM

2014-10-20 Thread Robert Schetterer
ough I wouldn't be surprised to find rather fewer false > positives from blocking that. > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: 23_bayes_ignore_header.cf

2014-10-14 Thread Robert Schetterer
xit codes. Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Many X- headers - possible spam sign?

2014-10-04 Thread Robert Schetterer
Am 04.10.2014 um 13:48 schrieb Reindl Harald: > blacklist_from *.mail this tld will be valid soon https://www.united-domains.de/neue-top-level-domain/ Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz

Re: Local URL blocking based on NS records?

2014-10-03 Thread Robert Schetterer
Am 02.10.2014 um 21:57 schrieb Reindl Harald: > Am 02.10.2014 um 21:39 schrieb Robert Schetterer: >> not exact what you want , but may help too >> >> http://www.postfix.org/postconf.5.html >> >> check_recipient_ns_access type:table >> Search the specified

Re: Local URL blocking based on NS records?

2014-10-02 Thread Robert Schetterer
at fastpark.net which usally means it has no mailserver you might use regex or pcre tables also perhaps also read https://sys4.de/de/blog/2014/04/02/e-mail-fehlerhafter-nameserver-ablehnen/ https://sys4.de/de/blog/2014/04/03/e-mail-fehlerhafter-nameserver-ablehnen-ii/ sorry german b

Re: Bogus SPF +all (was Re: dnssec / dane)

2014-08-15 Thread Robert Schetterer
f > thing in the wild? However it seems SPF is not a good trigger, but perhaps combi of valid DKIM and DANE is it "recently". I agree this may no last forever but on the other hand spamassassin rules are not static and can be changed if needed. Best Regards MfG Robert Schetterer -- [*] s

Re: dnssec / dane

2014-08-15 Thread Robert Schetterer
Am 15.08.2014 um 19:28 schrieb David F. Skoll: > On Fri, 15 Aug 2014 18:45:39 +0200 > Robert Schetterer wrote: > >> are there any stats how much spam is send with right/exist >> SPF/DMARC/DKIM (TLS) > > I have some statistics for SPF: > > spam=> select

Re: dnssec / dane

2014-08-15 Thread Robert Schetterer
Am 15.08.2014 um 18:33 schrieb Noel: > On 8/15/2014 10:27 AM, Robert Schetterer wrote: >> Am 15.08.2014 um 16:26 schrieb Kevin A. McGrail: >>> On 8/15/2014 2:30 AM, Robert Schetterer wrote: >>>> Question: Would it make sense to have rules based on dnssec / dane >&

Re: dnssec / dane

2014-08-15 Thread Robert Schetterer
Am 15.08.2014 um 16:26 schrieb Kevin A. McGrail: > On 8/15/2014 2:30 AM, Robert Schetterer wrote: >> Question: Would it make sense to have rules based on dnssec / dane >> records exist for a maildomain ? >> > A) rules have to be used for things that indicate ham or spa

dnssec / dane

2014-08-14 Thread Robert Schetterer
Question: Would it make sense to have rules based on dnssec / dane records exist for a maildomain ? Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263

Re: Opinions needed on what to consider spam

2014-08-11 Thread Robert Schetterer
etc ), users may blacklist it by their own ( or their postmaster should do it for them ) and/or upload to some autolearn script etc Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsg

Re: Google, IPv6 and SPF (was Re: No SPF/DKIM/DMARC rule)

2014-07-26 Thread Robert Schetterer
t was reported plausible to fail with ipv6 anything setup right way sometimes. I guess google has/had "hidden" additional checks on ipv6 mail by whatever reason. Anyway most people dont forget ipv6 ptr , but fail with including ipv6 SPF, if DKIM is used it should not relate to ipv4/ipv6 trans

Re: Google, IPv6 and SPF (was Re: No SPF/DKIM/DMARC rule)

2014-07-25 Thread Robert Schetterer
search with google *g Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: No SPF/DKIM/DMARC rule

2014-07-25 Thread Robert Schetterer
r domains that lack an SPF record. > > Regards, > > David. > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Mar

Re: How to setup threshold in SpamAssassin.sfd for Thunderbird?

2014-07-13 Thread Robert Schetterer
he OK button. Many users report good results with values of 30 or lower. ... some plugins written on that page may help too it may be a good idea also, to stop TB junk control in complete and setup a normal TB filter honoring Server X-Spam-score what you like Best Regards MfG Robert Schetterer --

Re: Enom strikes back?

2014-05-27 Thread Robert Schetterer
ocedure a registrar should use ,to preview the intention of a customer which registers domains? Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vo

Re: discard high scoring spam?

2014-01-06 Thread Robert Schetterer
ate filters at the >> destination servers and having them deleted there. Seems like needless >> traffic/resource usage. Thoughts? > > Amavisd - provides all the glue between MTA, spam filter, antivirus > http://www.ijs.si/software/amavisd/ additional http://amavisd-milter.so

Re: discard high scoring spam?

2014-01-06 Thread Robert Schetterer
ver > for the recipient domain example.com by mx3.example.com. [192.241.xxx.xxx]. > > The error that the other server returned was: > 550 5.7.1 Blocked by SpamAssassin thats fine, if the mail was spam and its spam tag was over the configured limit > > On 2014-01-06 09:36, Robert Schett

Re: discard high scoring spam?

2014-01-06 Thread Robert Schetterer
as a security patch to a pretty big exploit. =/ spamass-milter works fine with postfix exploit is fixed ,and wasnt ever relevant on good configured postfix servers, there is simply nothing to do making it better so no updates are needed > > On 2014-01-06 09:07, Robert Schetterer wrote: >

Re: discard high scoring spam?

2014-01-06 Thread Robert Schetterer
Am 06.01.2014 16:15, schrieb Kevin A. McGrail: > On 1/6/2014 10:07 AM, Robert Schetterer wrote: >> Am 06.01.2014 16:02, schrieb Mark Chaney: >>> I sure I hope I didnt fail to bad on searching for this answer, but when >>> simply using spamassasin with postfix as an

Re: discard high scoring spam?

2014-01-06 Thread Robert Schetterer
hem deleted there. Seems like needless traffic/resource > usage. Thoughts? > > Thanks, > Mark i.e use spamass milter with spamassassin http://savannah.nongnu.org/projects/spamass-milt/ -r nn Reject scanned email if it greater than or equal to nn. Best Regards MfG Robert Schette

Re: Detecting very recently registered domain names

2013-12-19 Thread Robert Schetterer
if that was the description on >>> wikipedia from a year or so ago. This compendium has been written over >>> many years. > > On 19.12.13 19:39, Robert Schetterer wrote: >> not a big problem at all ,in your case, but some "marketing people" >> promote sp

Re: Detecting very recently registered domain names

2013-12-19 Thread Robert Schetterer
regrine Computer Consultants Corporation > 3927 Old Lee Highway, Suite 102-C > Fairfax, VA 22030-2422 > > http://www.pccc.com/ > > 703-359-9700 x50 / 800-823-8402 (Toll-Free) > 703-359-8451 (fax) > kmcgr...@pccc.com <mailto:kmcgr...@pccc.com> > Best Regards Mf

Re: Detecting very recently registered domain names

2013-12-19 Thread Robert Schetterer
Am 19.12.2013 19:21, schrieb Kevin A. McGrail: > On 12/19/2013 1:17 PM, Robert Schetterer wrote: >> couldnt read that all ,but looks nice > Thanks. >> spf. dkim, dmarc are not antispam mechs, however they may help sometimes >> in "some" spam cases, so do not m

Re: Detecting very recently registered domain names

2013-12-19 Thread Robert Schetterer
" its always the content which makes a mail spammy > > You can also see all the framework I'm working on for an RBL for the SA > Project. > > Regards, > KAM > > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franzisk

Re: Block "exe" in attachment.

2013-11-14 Thread Robert Schetterer
>>> that some attachment is an exe file, but that's all. >> >> Agreed. >> >>> You may consider using amavisd. >> >> Or MailScanner. > > or Fuglu (http://www.fuglu.org/) or like this http://www.cyberciti.biz/tips/postfix-block-mime-att

Re: reject unverified sender with infut from spamassassin

2013-08-21 Thread Robert Schetterer
Am 21.08.2013 11:41, schrieb Per-Erik irt Persson: > On 08/21/2013 10:22 AM, Robert Schetterer wrote: >> Am 21.08.2013 09:59, schrieb Per-Erik irt Persson: >>> Or is smtpverification just a path that you don't want to walk down? >> please read i.e

Re: reject unverified sender with infut from spamassassin

2013-08-21 Thread Robert Schetterer
ork very fine with "greylisting" servers try better ways, i.e analyze your logs see if spf, dkim check may help etc Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht M

Re: N00b question - sa-milter Checking Orig Networks

2013-05-13 Thread Robert Schetterer
options so you may have a look at http://sys4.de/de/blog/2013/04/12/abholdienst-fur-mail/ ( sorry only german, but settings should be readable for english natives too ) Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 M

Re: dns*.registrar-servers.com as a rogue registrar?

2013-05-07 Thread Robert Schetterer
in Postfix 2.1 and later. you may combine it then with smtpd_restriction_classes but however body analyse stuff should be more helpfull at the end, perhaps you should post examples Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München S

Re: Testing Valid Recipients for outbound spam filtering

2013-05-01 Thread Robert Schetterer
in my opinion, we ve done some concepts about such , but not released anything after all outbound recipient verfiy will not make you happy as others may firewall you by doing to much recipient testing, but it may be a way for limited domains, know to be problematic , analysed by your log before Bes

Re: spamass-milter rejecting messages because no score found in large emails

2013-03-23 Thread Robert Schetterer
Am 23.03.2013 22:46, schrieb Matus UHLAR - fantomas: >>> Robert Schetterer skrev den 2013-03-20 15:44: >>>> http://spamassassin.apache.org/full/3.2.x/doc/spamc.html > >> Am 22.03.2013 22:31, schrieb Benny Pedersen: >>> are spamass-milter using spamc ? &g

Re: spamass-milter rejecting messages because no score found in large emails

2013-03-22 Thread Robert Schetterer
Am 22.03.2013 22:31, schrieb Benny Pedersen: > Robert Schetterer skrev den 2013-03-20 15:44: > >> http://spamassassin.apache.org/full/3.2.x/doc/spamc.html > > are spamass-milter using spamc ? at my knowledge spamass-milter uses spamd, the deamon vers of spamc i.e mai

Re: spamass-milter rejecting messages because no score found in large emails

2013-03-20 Thread Robert Schetterer
Am 20.03.2013 22:27, schrieb Kevin A. McGrail: > On 3/20/2013 12:58 PM, Robert Schetterer wrote: >> Am 20.03.2013 15:44, schrieb Robert Schetterer: >>> guess you have a failure in your setup, ask spamassassin list >> uff ,my fault i saw this comming from postfix list >

Re: spamass-milter rejecting messages because no score found in large emails

2013-03-20 Thread Robert Schetterer
Am 20.03.2013 15:44, schrieb Robert Schetterer: > guess you have a failure in your setup, ask spamassassin list uff ,my fault i saw this comming from postfix list Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München S

Re: spamass-milter rejecting messages because no score found in large emails

2013-03-20 Thread Robert Schetterer
will be returned unprocessed (default: 500 KB). If spamc gets handed a message bigger than this, it won't be passed to spamd. The maximum message size is 256 MB. The size is specified in bytes, as a positive integer greater than 0. For example, -s 50. guess you have a failure in you

Re: hinet.net?

2013-02-14 Thread Robert Schetterer
, hinet is a problem since ever , use ie spamhaus rbl at smtp level to block them > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Be

Re: sa-learn and exchange integration

2013-02-13 Thread Robert Schetterer
ly not with open software, so if you choose exchange you choose the m$ way, which is ok anyway but dont expect matching open source stuff with it any time/task Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Si

  1   2   3   >